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Abstract 

Define ip m to be the smallest strong pseudoprime to the first m prime bases. 
The exact value of ip m is known for 1 < m < 8. Z. Zhang have found a 19- 
decimal-digit number Qn = 382512305 6546413051 which is a strong pseudo- 
prime to the first 11 prime bases and he conjectured that 

ip9 = 4>w = i>n = Qu- 
We prove the conjecture by algorithms. 

Keywords. Strong Pseudoprimes, Chinese Remainder Theorem 

1 Introduction 

If n is prime, in view of Fermat's little theorem, the congruence 

a n ~ l = 1 mod n 

holds for every a with gcd(o, n)=l. There are composite numbers also satisfying 
the congruence. Such an odd composite number n is called a pseudoprime to base 
a (psp(a) for short). Moreover for an odd prime n, let n — 1 = 2 s d with d odd, we 
have 

a d = 1 mod n 

or 

a = — l mod n 

for some k satisfying < k < d. If a composite number n satisfies these two 
equations, we call n a strong pseudoprime to baes a (spsp(a) for short). This is the 
basic of Rabin-Miller test [3]. 
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Define ip m to be the smallest strong pseudoprime to all the first m prime bases. 
If n < rp m , then only m strong pseudoprime tests are needed to find out whether 
n is prime or not. If we know the exact value of iprni then for integers ti <C iprni 
there is a deterministic primality testing algorithm which is easier to understand 
and also faster than ever known other tests. The exact value of ip m for 1 < m < 8 
is known [U [2]. 
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In paper [T], Jaeschke also gave upper bounds for ipg, ipio, ipu. These bounds were 
improved by Z. Zhang for several times and finally he conjectured that 

ifj g = ^ w = ^ n = Q u = 3825 12305 65464 13051 

= 149491 • 747451 • 34233211 

Zhang also gave upper bounds and conjectures for ip m , with 12 < m < 20 (see 

misiE]). 

In this paper, we develop several algorithms to get the following conclusion. 

Claim 1. V>9 = iho = *Pn = Qn = 3825 12305 65464 13051. 

This article is organized like this. In §2 we give notations and basic facts needed 
for our algorithms. In §3 we get the properties of primes up to y/Qu which give us 
much information to design our algorithm. Just as in pQ , we consider the number of 
prime divisors of the testing number. Let n = p\ ■ p2 ■ ■ -Pt- In §4 we consider t > 5 
and t = 4 respectively, §5 for t = 3 and §6 for t = 2. In §7 we get our conclusion 
and give the total time we need for our algorithms. 

2 Foundations of algorithms 

In this section, we give the foundations for our algorithm. Let p be a prime, a is 
an integer with gcd(a,p)=l, denote the smallest positive integer e such that a e = 1 
mod p by Ord p (a). For example, we have Ord§(2) = 4. Moreover for any integer n, 
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if n = p e n' with gcd(ra, n')=l, we denote e by Val p (n). In this article, we only use 
Val p (n) for p = 2, we write Val(n) by abbreviation. For f £ Z n , t> = (01, . . . , a n ) 
with all gcd(aj,p)=l we define 

a£ = (Val(Ord p ( ai )), . . . , Val(Ord p (a n ))). 

If n is a pseudoprime (or strong pseudoprime) for all the OjS, we denote it by psp(v) 
(or spsp(v)). 

We need to check all odd integers less than Qn to see if there are strong pseu- 
doprimes to the first nine bases. First we are going to exclude the integers having 
square divisors. If n is a psp(a) and p 2 \n for some prime p, then we have 

a n_1 = 1 mod p 2 . 

also 

qPCp-1) = i mo d p 2 . 

As gcd(p, n — 1)=1, we have 

aP^ 1 = 1 mod p 2 

For a = 2 and 3, 

2 P ~ 1 = 1 mod p 2 , 3 P_1 = 1 mod p 2 

These two equation do not hold simultaneously for any prime p less than 3 • 10 9 [2 j5 
which is greater than \/Qn ~ 1.9 • 10 9 , so we only need to consider squarefree 
integers. 

Now we give the following important proposition(also see [I]). 

Proposition 1. Let n = p\ . . . p t with different primes p%, . . . ,pt, v = (oi, . . . , a m ) 
with different integers such that gcd(ai,pj)=l for all i = l,...,m, j = l,...,t. 
Then n is an spsp(v) iff n is a psp(v) and a pi = ■ ■ ■ = a pt . 

Proof. Let n — 1 = 2 s d with d odd. By Chinese Remainder Theorem 

a =—1 mod n <J=^ a =—1 mod pi 

for all 1 < i < t, so Val(Ord Pi (a)) = k + 1 for all i. And 

a d = 1 mod n <^=^ a d = 1 mod pi 

for all 1 < i < t, so Val(Ord Pi (a)) = for all i. The proposition is an immediate 
consequence of the above argument. □ 
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This is the main necessary condition that we use to find strong pseudoprimes. 
In our algorithm, v = (2, 3, 5, 7, 11, 13, 17, 19, 23), For a given prime p, we need to 
find prime q satisfying a p = o v q . A problem we have to face is that there are too 
many candidates of q, so we need another proposition(also see pQ). 



Proposition 2. For primes p,q, if Val(p — 
the Legendre symbol (~) = (|). 

Proof. This follows from 



1) = Val(q — 1) and a p a = o~q , then 



a^=Val{p-l)^ {-) = -!. 
' p 

□ 

Notice that if p = q = 3 mod 4 in the above proposition, the inverse is also 
true. This is important and then we can use Chinese Remainder Theorem to reduce 
candidates. We'll give details in the following sections. 

3 Primes up to VQn 

From now on, we fix v = (2, 3, 5, 7, 11, 13, 17, 19, 23). If n is a psp(u) and prime p\n, 
as a n_1 = 1 mod p, then 

Ord p (a)\(n - 1), a = 2, 3, 5, 7, 11, 13, 17, 19, 23. 

Define X p to be the least common multiple of the nine orders, then we have 

A p |(n-1), X p \(p-l). 

This point is helpful when designing our algorithms. Let \x v = (p— 1) /A p , we develop 
an algorithm to calculate /i p for p up to y/Qn- It takes about 15 hours and find 
that fi p is very small. We tabulate our results as following. 

In the table, for each value of fi p , we give the first and last several primes. There 
are two rows with \x v = 2, one for p = 3 mod 4 and the other for p = 1 mod 4. 
The binary row is for primes p with 

p=l mod 4, o~p E {0, 1}^. 

Since (|) = — 1 for p = 5 mod 8, in the second /i p = 2 row all p are in the residue 
class 1 mod 8. For the same reason, in the binary row also with p = 1 mod 8, as 
there is no prime with \x v > 8, all primes in binary row are 9 mod 16 and with 
/i p = 4. In the last column, we give the total number of each kind of primes. 
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Hp for p up to y/Qn 





primes 


total 


2 

V = 3(4) 


18191, 31391, 35279, 38639, 63839, 95471, 

10/1711 1/17fi71 1 Q^^QS^Q 10^(^97^10 

iu4w n, i4t i o < ±,. . . , ryoooyoooy, lyoooz/oiy, 
1955645831, 1955687159, 1955728199 


QQ87S 


2 

V = 1(4) 


87/181 18^fi/11 QQfiQRI QQ/IQfiQ /I8Q98Q 

o(4oi, ioDD4i, ooDoDi, oy4yoy, 4oozoy, 

^nzinni M ^7(^1 10^719^90 IQ^^I^fiQ 

ou^tuui, oio/ui,. . . , lyoo / izozy, iyoo/ loooy, 
1Q c > c i740fiOQ 10^74^790. 1 Q^^fiO^fil 


Q1 ^zL1 
y 1041 


3 


4775569, 5057839, 5532619, 7340227, 7561207 
8685379, 9734161,. . . , 1953162751, 
1953185551 1954279519 1955425393 


2226 


4 


25433521, 120543721, 129560209, 138156769, 
148405321, 174865681,. . . , 1838581369, 
1867026001, 1892769649, 1918361041 


111 


5 


650086271, 792798571, 858613901, 
1794251801, 1820572771, 1947963301 


6 


6 


1785200041 


1 


7 


945552637 


1 


binary 


120543721, 148405321, 200893081, 224683369, 
421725529, 481266361,. . . , 1717490329, 
1810589881, 1828463641, 1838581369 
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4 t > 5 and t = 4 

As from the above, we only need to consider squarefree integers, we always denote 
n = pi . . .pt with pi < ■ ■ ■ < p t . In this section, we are going to exclude the two 
cases when t > 5 and t = 4. 

4.1 t>5 

For p up to [v^QnJ = 5206, let S p be the set of all primes q with a v q = a p , and 
denote kth element in S p by s p ^ in ascending order. Our algorithm puts out the 
first I elements of S p with I > 5 and 

5 4 
Qs p ,i<Qll, {Y\_ s p,i) s p,l > Qn- 

1=1 1=1 

It takes less than 22 seconds and puts out six sequences. We give our result in the 
following table. 
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sequence with equal a v v 







No. 


167, 3167, 11087, 14423, 21383, 75407 


(0,0,1,0,0,1,1,0,1) 


1 


263, 1583, 8423, 9767, 12503, 18743, 50423, 
54623, 106367, 127247 


(0,0,1,1,0,0,0,1,0) 


13 


443, 4547, 5483, 8243, 19163, 26987, 42683 


(1,0,1,1,1,0,0,1,1) 


2 


463, 1087, 13687, 17383, 25447, 37447 


(0,1,1,1,1,1,0,1,1) 


1 


479, 4919, 5519, 6599, 7559, 29399, 51719 


(0,0,0,0,0,1,1,1,0) 


4 


2503, 2767, 5167, 5623, 11887, 31543 


(0,1,1,1,0,1,0,0,0) 


1 



At first glance we know t > 5 is impossible, Then we check these six sequences if 
they can make up an spsp(-u) with 5 prime divisors. The last column is the number 
of integers with t = 5 and less than Qn in each sequence. Our checking algorithm 
terminates in less than 0.1 second and finds no strong pseudoprime. 

There are details about our algorithm needing to explain. Notice that when 
pi = 3 mod 4, and finding q with a pi = a v q , as the least binary prime is 120543721. 
In fact we only need to check q = 3 mod 4. by proposition 2, consider 

we only need to check q = p\ mod 24. also in p\ = 3 mod 4 case, we calculate the 
Lengedre symbol (— ) instead of Val(Ord Pl (-)). 

4.2 t=4 

For t = 4, we first define (pi,P2,P3) to be a feasible 3-tuple if it satisfies 
Pi <p 2 < P3, o-pi = cr v p2 = (?p 3 , P\P2P% < Qu- 

Our algorithm goes like this: for each p\ up to [v^Qn] = 44224, find feasible 3-tuples 
(PiiP2,P3)- As Apjn — 1, for i = 1, 2, 3. let A be the least common multiple of these 
three numbers, and b = P1P2P3, then we have 

n = bp4 = 1 mod A. 

If gcd(6, A) / 1, it is impossible to have such n. If gcd(6, A) = 1, we need to check 
all P4 with 

P3 < P4 < Qn/b, P4 = b~ x mod A 

Our algorithm takes about 15 minutes, finding 88729 feasible 3-tuples and no spsp(w) 
with t = 4. As for t = 5, when p\ = 3 mod 4, we use Legendre symbol and q = pi 
mod 24 to shorten our running time. 
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5 t = 3 



As above, we define feasible 2-tuple (pi,P2) with 

pi <p 2 , o v Vl = a'p 2 , p x p\ < Q n 

Our algorithm is just as t = 4 case, for each p\ up to [v^Qii] = 1563922, find feasible 
2-tuples (pi,P2)- Let b = p\pi and A = lcm(A Pl , A P2 ), then A|n — 1. If gcd(6, A) = 1, 
we check all p% with 

P2 < P3 < Qu/b, P3 = b~ l mod A. 

We divide our algorithm into three parts according p\ = 3 mod 4, p\ = 5 mod 8 
and pi = 1 mod 8, also we use Chinese Remainder Theorem to reduce candidates. 

5.1 pi = 3 mod 4 

For pi = 3 mod 4, we first assume p2 = 3 mod 4. as from §3, we know if j?2 = 1 
mod 4, ^2 must be a binary prime and so n P2 = 4. There are only 111 such primes 
up to y/Qu, we'll check these numbers later. By proposition 2, we use the first 5 
primes and 

(-) = (-), a = 2, 3, 5, 7, 11 

Pi P2 

reducing to 30 residue classes module 9240 = 8- 3- 5- 711. 

Example 1. For p\ =31, the first module 4 equaling 3 prime. Feasible 2-tuple 
(31, P2) must with 

P2 < [VQii/31] = 351270645 

If we do not have §3, we need to check all the odd number greater than 31, there 
are about 1.7 • 10 s candidates. If we do it as for t = 5 and 4, there are 1.4 • 10 7 
candidates. For our method, there are only 30 • 35 q 2 ^ 645 w 1.1 • 10 6 candidates. 

There is another trick we used, if b = p\P2 is less than 2 • 10 6 , the correspond A 
may be too small. We do not find P3 as the above describes. In fact, as 

n = bps = b mod p^ — 1 

and 

a n ~ l = a b - 1 = 1 mod p 3 , a = 2,3 

We calculate gcd(2 b - 1 - l^ 6 " 1 - 1) then factor it to get the prime divisor which 
is greater than p2 and less than Qu/b. Without this trick, our algorithm run more 
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than 24 hours and still din't terminate. When using the trick, the algorithm takes 
less than 5 hours. It gives 10524046 feasible 2-tuples and the single spsp(v) 

Qn = 3825 12305 65464 13051 = 149491 • 747451 • 34233211. 

The following table gives all the 37 feasible 2-tuples with multiple less than 2- 10 6 , 
which can explains why the first case takes so long time. 

Example 2. Notice that for some b the A is small. For b = 43 • 9283 = 339169, we 
need to check all p 3 with 

9283 <p 3 < Qu/b « 1.1 • 10 13 , p 3 = 7771 mod 9282 

and for b = 571 • 2851 = 1627921, all p 3 with 

P2 < Ps < Qu/b « 2.3 • 10 12 , p 3 = 2281 mod 2580 

These are really time-consuming. 

5.2 pi = 5 mod 8 

If pi = 5 mod 8, as (^-) = —1, Val(Ord Pl (2)) = 2, so for each p2 with a v p2 = a^, 
we must have pi = 1 mod 4. If pi = 5 mod 8, by proposition 2, we use the first 5 
primes then 

(-) = (-), a = 2,3,5,7,ll. 

P2 Pi 

There are 30 residue classes module 9240. If p2 = 1 mod 8, for p2 = 1 mod 16, we 
must have fi P2 = 4, we'll check these numbers later. For p 2 = 9 mod 16, we must 
have 

(-) = 1, a = 2, 3, 5, 7, 11. 

P2 

There are 30 residue classes module 18480. The total time for checking all p\ up to 
1563922 is about 10 hours and we find 522239 feasible 2-tuples with no spsp(-u). 

5.3 pi = 1 mod 8 

For pi = 1 mod 8, denote e = Val(p\ — 1) and / = Val(X pi ), then f < e and 

pi = 1 + 2 e mod 2 e+1 , p 2 = 1 mod 2 / 

for crp 2 = (j^. If / = e, then we consider two cases. For p2 = 1 + 2 e mod 2 e+1 , we 
have 

(-) = (-), a = 2, 3, 5, 7, 11 
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feasible (pi,j?2) with b < 2 • 10 6 



b 


Pi 


X>9 
lr £ 


A 


pi 


685441 


31 


22111 


22110 


( 0, 1, 0, 0, 1, 1, 1, 0, 1 ) 


919801 


31 


29671 


29670 


( 0, 1, 0, 0, 1, 1, 1, 0, 1 ) 


1267249 


31 


40879 


204390 


( 0, 1, 0, 0, 1, 1, 1, 0, 1 ) 


399169 


43 


9283 


9282 


( 1, 1, 1, 1, 0, 0, 0, 1, ) 


703609 


43 


16363 


114534 


( 1, 1, 1, 1, 0, 0, 0, 1, ) 


1379569 


43 


32083 


224574 


( 1, 1, 1, 1, 0, 0, 0, 1, ) 


1487929 


43 


34603 


242214 


( 1, 1, 1, 1, 0, 0, 0, 1, ) 


1772761 


43 


41227 


288582 


( 1, 1, 1, 1, 0, 0, 0, 1, ) 


741049 


47 


15767 


362618 


( 0, 0, 1, 0, 1, 1, 0, 1, 1 ) 


1879201 


47 


39983 


919586 


( 0, 0, 1, 0, 1, 1, 0, 1, 1 ) 


117049 


67 


1747 


19206 


( 1, 1, 1, 1, 1, 1, 0, 0, ) 


1578721 


67 


23563 


23562 


( 1, 1, 1, 1, 1, 1, 0, 0, ) 


1354609 


71 


19079 


667730 


( 0, 0, 0, 1, 1, 1, 1, 0, 1 ) 


722929 


79 


9151 


118950 


( 0, 1, 0, 1, 0, 0, 1, 0, ) 


1272769 


79 


16111 


209430 


( 0, 1, 0, 1, 0, 0, 1, 0, ) 


457081 


83 


5507 


225746 


( 1, 0, 1, 0, 0, 1, 0, 1, ) 


1391329 


83 


16763 


687242 


( 1, 0, 1, 0, 0, 1, 0, 1, ) 


1739929 


83 


20963 


859442 


( 1, 0, 1, 0, 0, 1, 0, 1, ) 


1652401 


107 


15443 


818426 


( 1, 0, 1, 1, 0, 0, 1, 0, ) 


1730689 


139 


12451 


286350 


( 1, 1, 0, 0, 0, 0, 1, 1, 1 ) 


1790881 


163 


10987 


296622 


( 1, 1, 1, 1, 1, 1, 1, 1, 1 ) 


528889 


167 


3167 


262778 


( 0, 0, 1, 0, 0, 1, 1, 0, 1 ) 


1851529 


167 


11087 


920138 


( 0, 0, 1, 0, 0, 1, 1, 0, 1 ) 


1892881 


211 


8971 


62790 


( 1, 1, 0, 1, 0, 0, 1, 0, 1 ) 


1552849 


229 


6781 


128820 


( 2, 0, 1, 2, 1, 2, 0, 0, 2 ) 


416329 


263 


1583 


207242 


( 0, 0, 1, 1, 0, 0, 0, 1, ) 


223609 


311 


719 


111290 


( 0, 0, 0, 0, 1, 0, 1, 1, 1 ) 


1912849 


331 


5779 


317790 


( 1, 1, 0, 1, 1, 1, 0, 0, 1 ) 


825841 


379 


2179 


45738 


( 1, 1, 0, 1, 1, 1, 1, 0, ) 


540409 


439 


1231 


89790 


( 0, 1, 0, 0, 0, 0, 1, 0, 1 ) 


503281 


463 


1087 


83622 


( 0, 1, 1, 1, 1, 1, 0, 1, 1 ) 


929041 


503 


1847 


463346 


( 0, 0, 1, 0, 0, 0, 1, 1, ) 


1627921 


571 


2851 


2850 


( 1, 1, 0, 1, 0, 0, 1, 1, ) 


1280449 


787 


1627 


213006 


( 1, 1, 1, 0, 0, 1, 1, 0, ) 


1616521 


919 


1759 


268974 


( 0, 1, 0, 1, 0, 0, 0, 1, ) 


1538161 


1063 


1447 


255942 


( 0, 1, 1, 0, 0, 0, 0, 0, ) 


1772521 


1103 


1607 


884906 


( 0, 0, 1, 1, 1, 1, 0, 1, ) 
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There are 30 residue classes module 2 e+1 • 1155. For p2 = 1 + 2 e+1 mod 2 e+2 , we 
have 

(-) = 1, a = 2,3,5,7,ll 

P2 

30 residue classer module 2 e+2 • 1155. The P2 = 1 mod 2 e+2 case is left for the 
prime with fi p2 =4. If / < e, we only check p2 = pi mod 2* . In fact, according to 
§3, this only happens when / = e — 1 and ji Pl = 2. There are only 50 such primes 
up to 1563922. Our algorithm takes less than 100 minutes and finds 30728 feasible 
2-tuples and no spsp(w). 

5.4 = 4 

In the above three cases, we don't consider the case fi P2 = 4. Now we assume 
fi P2 = 4, as we also have 

pi > 29, p lV \ < Q u 

So p2 < 363181490. According §3, there only 12 primes under this bound. We check 
all of them and find no feasible 2-tuples. Until now we finish the t = 3 case and find 
only one spsp(f) Qu. The total time is less than 17 hours. 

6 t=2 

For t = 2, there is no need to define feasible 1-tuples. As A Pl |n — 1 we have 
Pi < P2 < Qu/pi, P2 = 1 mod X pi . 

Since A Pl is close to p\ — 1, there are about Qn/(pi) 2 candidates for each p\. When 
pi is small, there are too many. According the value of p±, we divide into three 
parts. 

6.1 small and large pi 

If pi < 10 6 , we'll use the same method as for t = 3, P1P2 < 2 • 10 6 . We have 

a Pl - 1 = a" 1 ' 1 = 1 mod p 2 , a = 2,3 
so we calculate gcd(2 Pl ~ 1 — 1, 3 Pl_1 — 1) and factor it to get prime divisors P2 with 

Pi < P2 < Qu/pi- 

Our algorithm takes about 9 hours and finds no spsp(v). 

For p\ > 10 8 , There are less than 380 candidates, we just run our algorithm 
as described at the beginning of this section. It takes about 18 hours and find no 
spsp(V). 
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6.2 10 6 <pi< 10 s 

When p\ is in this interval, we divide into three parts according to p\ = 3 mod 4, 
pi = 5 mod 8 and p± = 1 mod 8. In each case, just as t = 3 we use Chinese 
Remainder Theorem to reduce candidates. This time we use the first 6 primes. 

For pi = 3 mod 4, p2 with <jp 2 = a v pi . If p2 = 3 mod 4 then we have p2 = 1 
mod A Pl and 

(-) = (-), a = 2, 3, 5, 7, 11, 13. 

Pi P2 

If p2 = 1 mod 4, then we have p2 = 1 mod A Pl and 

(— ) = 1, a = 2,3,5,7,11,13. 

P2 

Our algorithm takes about 15 hours and finds no spsp(v). 

For pi = 5 mod 8, then j>2 = 1 mod 4. If j>2 = 5 mod 8 then we have P2 = 1 
mod A Pl and 

(-) = (-), a = 2, 3, 5, 7, 11, 13. 

Pi P2 

If p2 = 1 mod 8, then we have P2 = 1 mod A P1 and 

(— ) = 1, a = 2,3,5,7, 11,13. 

P2 

Our algorithm takes about 15 hours and finds no spsp(-u). 

For p\ = 1 mod 8, denote e = Val{p\ — 1), / = FaZ(cr pi ), then f < e. If / = e, 
there are two cases. For p2 = 1 + 2 e mod 2 e+1 , then ^2 = 1 mod A Pl and 

(-) = (-), a = 2,3,5,7,ll,13. 

Pi P2 

For p2 = 1 mod 2 e+1 , then P2 = 1 mod A P1 and 

(— ) = 1, a = 2,3,5,7, 11,13. 

P2 

If / < e, we only use p 2 = 1 mod A P1 , Our algorithm takes about 16 hours and 
finds no spsp(w). 

We also run an algorithm for these cases without use Chinese Remainder Theo- 
rem, it took more than 10 days and didn't halt. So the Chinese Remainder Theorem 
is really helpful here. We need to be careful when writing our algorithm because 
gcd(a, A Pl ) 7^ 1 for some p\ and a = 2,3, 5, 7, 11, 13. 

Then we finish the t = 2 case and find no strong pseudoprime to the first 9 
primes. 
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7 Conclusion 



Until now, we have checked all the odd composite numbers up to Qn, and find only 
one strong pseudoprime Qn to the first 9 primes. As it is easy to check that Qn is 
also strong pseudoprime to the bases 29 and 31, we have our claim in §1. 

V>9 = ^io = ipn = Qn 

So for an integer less than Qn, only 9 strong pseudoprime tests are needed to judge 
its primality and compositeness. We use the software Magma and all algorithms 
are run in my PC(an Intel(R) Core(TM)2 Duo CPU E7500 @ 2.93GHz with 2Gb of 
RAM). The total time is about 105 hours. 
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